[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#224035: apache: suexec compiled with uid>=1000, breaks internal systems

Package: apache
Severity: normal

Apache's suexec is compiled with min uid 1000 as of

This is of course as it should be, however, there are existing
environments where it is difficult to change all user uids above 1000.
(Most of these have been active for more than 10 years when
system uids was below 100. :-)
Also some of my internal packages (not in Debian) depends on being
able to suexec and still have a system account.

Because of this, would you consider adding an extra suexec, compiled
with the old uidmin?
The select mechanism is already in place, it's just an extra question
that's needed.

-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux zev 2.4.23-zev #1 Fri Dec 12 12:58:22 CET 2003 i686
Locale: LANG=C, LC_CTYPE=en_US.ISO-8859-1

Versions of packages apache depends on:
ii  apache-common      Support files for all Apache webse
ii  debconf                     1.3.22       Debian configuration management sy
ii  dpkg                        1.10.18      Package maintenance system for Deb
ii  libc6                       2.3.2.ds1-10 GNU C Library: Shared libraries an
ii  libdb4.1                    4.1.25-10    Berkeley v4.1 Database Libraries [
ii  libexpat1                   1.95.6-6     XML parsing C library - runtime li
ii  libmagic1                   4.06-1       File type determination library us
ii  libpam0g                    0.76-14      Pluggable Authentication Modules l
ii  logrotate                   3.6.5-2      Log rotation utility
ii  mime-support                3.23-1       MIME files 'mime.types' & 'mailcap
ii  perl [perl5]                5.8.2-2      Larry Wall's Practical Extraction 

-- debconf information:
* apache/enable-suexec: true
* apache/server-name: zev.se.axis.com
* apache/document-root: /var/www
* apache/server-port: 80
* apache/init: true
* apache/server-admin: webmaster@zev.se.axis.com

Reply to: